Описание
Grafana: SQL Expressions Read File From Disk
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable.
Пакеты
github.com/grafana/grafana
< 1.9.2-0.20260513165311-fb7336fc36c1
1.9.2-0.20260513165311-fb7336fc36c1
Связанные уязвимости
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable.
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable.
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable.
A vulnerability in SQL Expressions allows an authenticated attacker to ...
Уязвимость функции sqlExpressions() платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю читать произвольные файлы